Remote Browser Isolation
The Citrix Remote Browser Isolation service (formerly Secure Browser service) isolates web browsing to protect the corporate network from browser-based attacks. Remote Browser Isolation service delivers consistent, secure remote access to internet hosted web applications, with no need for user device configuration. Administrators can rapidly roll out remote isolated browsers, providing instant time-to-value. By isolating internet browsing, IT administrators can offer end users safe internet access without compromising enterprise security.
Users log on through Citrix Workspace (or Citrix Receiver) and can open web apps in the configured web browser. The website does not directly transfer any browsing data to or from the user device, so the experience is secure.
The Remote Browser Isolation service can publish remote isolated browsers for use with:
-
Shared Passcode external web apps. If you publish a browser with shared passcode authentication, users must enter the passcode to launch an app.
-
Authenticated external web apps. When you publish authenticated external web apps and launch the apps using Citrix Workspace, the Remote Browser Isolation service requires a resource location containing at least one Cloud Connector (two or more are recommended). For details, see Citrix Cloud Connector. For authenticated apps, you must add users with Citrix Cloud Library.
-
Unauthenticated external web apps. When you publish unauthenticated external web apps and launch the apps using Citrix Workspace, the Remote Browser Isolation service requires a resource location containing at least one Cloud Connector (two or more are recommended). For details, see Citrix Cloud Connector.
Although typically not recommended, unauthenticated external web apps might be used for a simple proof of concept.
For more information, see Publish a remote isolated browser.
The service also offers:
- Integration of published apps with Citrix Workspace
- Integration of published apps with on-premises StoreFront
- Simple URL allow list function for security
- Usage monitoring
- Controls for clipboard use, printing, kiosk mode, region failover, and client drive mapping
Remote Browser Isolation service with Citrix Secure Private Access
You can launch the published browsers of the Remote Browser Isolation Service by using the Citrix Secure Private Access console for accessing the Enterprise Web, TCP, and SaaS applications. You can also redirect the unsanctioned websites to open in the published browsers of the Remote Browser Isolation service through Citrix Secure Private Access.
For more information about accessing the isolated remote browsers through Citrix Secure Private Access, see the Configure an access policy with multiple rules and Unsanctioned websites in the Citrix Secure Private Access documentation.
Reference articles
- Secure Private Access service solution overview
- Citrix Cloud
- Self-service search for Remote Browser Isolation (Secure Browser)
- Citrix Enterprise Browser
- Security and Compliance Information
- Developer documentation